CISSP Security Architecture 2

Question 1

Which security architecture principle ensures that a compromised component cannot be used to gain unauthorized access to other components?

Accepted Answer

Isolation and containment

Answer

Isolation and containment limits the blast radius of a compromise by preventing lateral movement between components.

Question 2

In the Zachman Framework, which column addresses the question 'How does the system work?'

Accepted Answer

Function column

Answer

The Function column in the Zachman Framework addresses processes and how the system operates.

Question 3

A system that defaults to denying access when an error occurs is implementing which security principle?

Accepted Answer

Fail-secure

Answer

Fail-secure (or fail-safe) ensures systems default to a secure state — denying access — upon failure.

Question 4

Which of the following best describes a Reference Monitor?

Accepted Answer

An abstract machine that mediates all access between subjects and objects

Answer

A Reference Monitor is an abstract machine concept that intercepts every access attempt between subjects and objects to enforce policy.

Question 5

The Clark-Wilson integrity model primarily addresses which type of environment?

Accepted Answer

Commercial transaction integrity

Answer

Clark-Wilson was designed for commercial environments, ensuring data integrity through well-formed transactions and separation of duties.

CISSP - Certified Information Systems Security Professional Practice Test